Prepare release 0.9.24

Author: renaudallard

ChangeLog

@@ -1,3 +1,14 @@
+2026-03-04  Renaud Allard  <renaud@allard.it>
+
+	* Release 0.9.24
+	- Feature: Add -t flag to test configuration and exit without
+	  starting the proxy, similar to nginx -t.
+	- Feature: Add -g flag to allow group-read (0640) config file
+	  permissions, enabling SIGHUP config reload after privilege drop.
+	  A security warning is logged at startup when this flag is used.
+	- Improved permission error messages to show allowed modes and
+	  hint about the -g flag.
+
 2026-03-02  Renaud Allard  <renaud@allard.it>
 
 	* Release 0.9.23

NEWS

@@ -1,3 +1,16 @@
+sniproxy 0.9.24 (2026-03-04)
+===============================
+
+* Feature: Add -t flag to test configuration and exit without starting the
+  proxy, similar to nginx -t. Reports whether the config file is valid.
+* Feature: Add -g flag to allow group-read (0640) config file permissions.
+  After privilege drop the unprivileged process cannot re-read a root-owned
+  0600 config file, causing SIGHUP reload to fail. The -g flag relaxes the
+  permission check to accept 0640 while still rejecting group-write,
+  group-exec, and all other access. A security warning is logged at startup.
+* Improved config permission error messages to show the maximum allowed mode
+  and hint about the -g flag when applicable.
+
 sniproxy 0.9.23 (2026-03-02)
 ===============================
 

configure.ac

@@ -1,7 +1,7 @@
 #                                               -*- Autoconf -*-
 # Process this file with autoconf to produce a configure script.
 AC_PREREQ([2.71])
-AC_INIT([sniproxy],[0.9.23])
+AC_INIT([sniproxy],[0.9.24])
 AM_INIT_AUTOMAKE([subdir-objects])
 AM_SILENT_RULES([yes])
 AC_USE_SYSTEM_EXTENSIONS

debian/changelog

@@ -1,3 +1,12 @@
+sniproxy (0.9.24) unstable; urgency=medium
+
+  * Feature: Add -t flag to test configuration and exit.
+  * Feature: Add -g flag to allow group-read (0640) config permissions
+    for SIGHUP reload after privilege drop.
+  * Improved config permission error messages.
+
+ -- Renaud Allard <renaud@allard.it>  Tue, 04 Mar 2026 00:00:00 +0000
+
 sniproxy (0.9.23) unstable; urgency=medium
 
   * Security: Normalize IPv4-mapped IPv6 in rate limiter.

redhat/sniproxy.spec

@@ -1,5 +1,5 @@
 Name: sniproxy
-Version: 0.9.23
+Version: 0.9.24
 Release: 1%{?dist}
 Summary: Transparent TLS and HTTP layer 4 proxy with SNI support
 

setver.sh

@@ -1,6 +1,6 @@
 #!/bin/sh
 
-VERSION=0.9.23
+VERSION=0.9.24
 
 SOURCE_DIR=$(dirname $0)
 GIT_DIR=${SOURCE_DIR}/.git